Configure Signed URLs using IAM Sign Blob API
masterWhen running on Google Compute Services (App Engine, Cloud Run, Cloud Functions, etc.), the Python GCS client often requires a service account private key file to generate signed URLs. Since these services typically use access tokens from a metadata server instead of key files, you should use the IAM Sign Blob API.
To enable this, set iam_sign_blob or GS_IAM_SIGN_BLOB to True. You can optionally use sa_email or GS_SA_EMAIL to override the service account used for signing.